From 0588579a3f4f5294f1fc8339b2ed15b5f3b4abcb Mon Sep 17 00:00:00 2001
From: Marc Delisle <marc@infomarc.info>
Date: Sun, 24 Jun 2007 10:42:02 +0000
Subject: [PATCH] bug #1727138 HTML not encoded (more than 1000 characters)

---
 ChangeLog                | 1 +
 libraries/common.lib.php | 1 +
 2 files changed, 2 insertions(+)

diff --git a/ChangeLog b/ChangeLog
index eb0e085bb7..b0cac8ec4b 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -10,6 +10,7 @@ $HeadURL$
 - bug #1734285 Copy database with VIEWs
 - bug #1722502 DROP TABLE in export VIEW
 - bug #1729027 Sorting results of VIEW browsing
+- bug #1727138 HTML not encoded (more than 1000 characters)
 
 2.10.2.0 (2007-06-15)
 
diff --git a/libraries/common.lib.php b/libraries/common.lib.php
index 5f8da3c5bd..b6d09d5520 100644
--- a/libraries/common.lib.php
+++ b/libraries/common.lib.php
@@ -1407,6 +1407,7 @@ if (typeof(window.parent) != 'undefined'
             $max_characters = 1000;
             if (! defined('PMA_QUERY_TOO_BIG') && strlen($query_base) > $max_characters) {
                 define('PMA_QUERY_TOO_BIG',1);
+                $query_base = htmlspecialchars($sql_query);
             }
 
             // Parse SQL if needed